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In the Claims : 

Please amend Claims 57, 63, 72, 81, 91, 93 and 95, all as shown below. Applicant 
respectfully reserves the right to prosecute any originally presented or canceled claims in a 
continuing or future application. 

1-56. (Previously Canceled). 

57. (Currently Amended) A system for maintaining security in a distributed computing 
environment, comprising: 

a policy manager located on a server for managing a security policy and for distributing the 
security policy to a client wherein the security policy includes a plurality of rules customizable to the 
client ; and 

an application guard located at the client for managing access to securable components at 
a client level as specified by the security policy, the securable components including at least one 
application as sp e c i f ie d by th e s e cur i ty po li cy . 

58. (Previously Presented) The system of Claim 57 including a function within the application 
as specified by the security policy. 

59-62. (Previously Withdrawn). 

63. (Currently Amended) A method for maintaining security in a distributed computing 
environment, comprising: 

managing a security policy via a policy manager located on a server, the security policy 
including a plurality of rules customizable to a client ; and 

distributing the security policy to the client; and 

managing access as specified bv the security policy via an application guard located at the 
client to securable components including at least one application as sp e cifi e d by th e s e cur i ty po li cy . 
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64. (Previously Presented) The method of Claim 63 including a function within the application 
as specified by the security policy. 

65-68. (Previously Withdrawn). 

69-71 . (Previously Canceled). 

72. (Currently Amended) A method for maintaining security in a distributed computing 
environment, comprising the steps of: 

providing a policy manager located on a server to manage a security policy including a 
plurality of rules customizable to a client : and 

distributing the security policy to the client; and 

providing an application guard located at the client to manage access to securable 
components at a client level as specified by the security policy, the securable components including 
at least one application as sp e c i f ie d by th e s e cur i ty pol i cy . 

73. (Previously Presented) The method of Claim 72 including a function within the application 
as specified by the security policy. 

74-77. (Previously Withdrawn). 

78-80. (Previously Canceled). 

81 . (Currently Amended) A computer readable storage medium having stored thereon a set of 
instructions to execute a method for maintaining security in a distributed computing environment 
comprising the steps of: 

managing a security policy via a policy manager located on a server, the security policy 
including a plurality of rules customizable to a client : and 
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distributing the security policy to the client; and 

managing access as specified by the security policy via an application guard located at the 
client to securable components including at least one application as sp e c i f ie d by th e s e cur i ty po li cy . 

82. (Previously Presented) The computer readable storage medium of Claim 81 including a 
function within the application as specified by the security policy. 

83-86. (Previously Withdrawn). 

87-89. (Previously Canceled). 

90. (Previously Presented) The system of claim 57, wherein the application guard further allows 
for additional customized code to process and evaluate authorization requests based on the 
additional customized code. 

91 . (Currently Amended) The system of claim 90, further comprising a global policy specifying 
access privileges of the a user to securable components. 

92. (Previously Presented) The method of claim 72, wherein the application guard further allows 
for additional customized code to process and evaluate authorization requests based on the 
additional customized code. 

93. (Currently Amended) The method of claim 92, further comprising the step of providing a 
global policy specifying access privileges of the a user to securable components. 

94. (Previously Presented) The computer readable storage medium of claim 81 , wherein the 
application guard further allows for additional customized code to process and evaluate 
authorization requests based on the additional customized code. 
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95. (Currently Amended) The computer readable storage medium of claim 94, wherein the 
method further comprises the step of providing a global policy specifying access privileges of the 
a user to securable components. 
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